Static task
static1
Behavioral task
behavioral1
Sample
de253dd8f4ec69db3d03f8c7434c300f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de253dd8f4ec69db3d03f8c7434c300f.exe
Resource
win10v2004-20240226-en
General
-
Target
de253dd8f4ec69db3d03f8c7434c300f
-
Size
249KB
-
MD5
de253dd8f4ec69db3d03f8c7434c300f
-
SHA1
647ea1c395a907a6a9f9c39df4ddad04db197a4e
-
SHA256
39e51d9a5380c1ea1c309ff7f2b1bde9816bfdbd11a393fb1289cfd9a596ea3d
-
SHA512
d62001c396328514c1d171d8ac0bc6aaa2dc8a4cf2a536c6bf0445f4b3c6cf04e3bd5cbb939893a9da166fb6be2faf8becc677a525b3d981f0e8c4a23c87187b
-
SSDEEP
3072:vm8ALKM6FlqyW0O6vW/FDZz3uO0Zd25onZiNJm0SYRPqUSD+o/sOIkm15xfVMcMJ:oj6FcyW0ENBuO0b2k2Jm0SYRujIxFmcw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de253dd8f4ec69db3d03f8c7434c300f
Files
-
de253dd8f4ec69db3d03f8c7434c300f.exe windows:5 windows x86 arch:x86
b05f49d9308ae9274032e5e0c745c4e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
Sleep
HeapCreate
CreateSemaphoreA
MultiByteToWideChar
ReleaseSemaphore
GlobalUnlock
GetLastError
SetLastError
GetProcAddress
GlobalFree
LoadLibraryA
WaitForMultipleObjects
GetCurrentThreadId
CloseHandle
LocalFree
CreateThread
QueryPerformanceCounter
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
HeapReAlloc
LoadLibraryW
GetStringTypeW
LCMapStringW
GetConsoleMode
GetTickCount
WaitForSingleObject
GlobalLock
InterlockedDecrement
InterlockedIncrement
HeapAlloc
GetConsoleCP
SetFilePointer
IsProcessorFeaturePresent
HeapSize
GetSystemTimeAsFileTime
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WideCharToMultiByte
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
RtlUnwind
EncodePointer
DecodePointer
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
ExitProcess
WriteFile
GetCurrentProcessId
user32
DialogBoxIndirectParamA
GetSystemMetrics
GetClientRect
GetIconInfo
GetDC
GetForegroundWindow
ReleaseDC
GetCaretPos
MessageBoxW
gdi32
StretchBlt
DeleteObject
CreateCompatibleDC
SetStretchBltMode
CreateSolidBrush
ole32
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
SysFreeString
SysStringByteLen
VariantChangeType
VariantInit
SysAllocStringByteLen
VariantClear
SysStringLen
SysAllocString
GetErrorInfo
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ